Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
covid1920.github.comNot in the scope2026-11-14
covid192009.github.comNot in the scope2026-11-14
covid192010.github.comNot in the scope2026-11-14
covid192011.github.comNot in the scope2026-11-14
covid192012.github.comNot in the scope2026-11-14
covid192014.github.comNot in the scope2026-11-14
covid192017.github.comNot in the scope2026-11-14
covid196.github.comNot in the scope2026-11-14
covid197.github.comNot in the scope2026-11-14
covid19acc.github.comNot in the scope2026-11-14
covid19admin.github.comadminNot in the scope2026-11-14
covid19akamai.github.comNot in the scope2026-11-14
covid19api.github.comapiNot in the scope2026-11-14
covid19api-docs.github.comapiNot in the scope2026-11-14
covid19api1.github.comapiNot in the scope2026-11-14
covid19april.github.comNot in the scope2026-11-14
covid19b.github.comNot in the scope2026-11-14
covid19beta.github.comstagingNot in the scope2026-11-14
covid19billing.github.comNot in the scope2026-11-14
covid19boards.github.comNot in the scope2026-11-14
covid19br.github.comNot in the scope2026-11-14
covid19brand.github.comNot in the scope2026-11-14
covid19bucket.github.comdataNot in the scope2026-11-14
covid19c.github.comNot in the scope2026-11-14
covid19cases.github.comNot in the scope2026-11-14
covid19ci.github.comNot in the scope2026-11-14
covid19client.github.comNot in the scope2026-11-14
covid19cms.github.comadminNot in the scope2026-11-14
covid19com.github.comNot in the scope2026-11-14
covid19confluence.github.comtoolsNot in the scope2026-11-14
covid19control.github.comNot in the scope2026-11-14
covid19data.github.comNot in the scope2026-11-14
covid19docker.github.comtoolsNot in the scope2026-11-14
covid19docs.github.comNot in the scope2026-11-14
covid19drop.github.comNot in the scope2026-11-14
covid19edge.github.comNot in the scope2026-11-14
covid19eu.github.comNot in the scope2026-11-14
covid19euwe.github.comNot in the scope2026-11-14
covid19evelynn.github.comNot in the scope2026-11-14
covid19events.github.comNot in the scope2026-11-14
covid19feb.github.comNot in the scope2026-11-14
covid19forms.github.comNot in the scope2026-11-14
covid19github.github.comgitNot in the scope2026-11-14
covid19hw.github.comNot in the scope2026-11-14
covid19hwcdn.github.comNot in the scope2026-11-14
covid19jenkins.github.comciNot in the scope2026-11-14
covid19jinx.github.comNot in the scope2026-11-14
covid19june.github.comNot in the scope2026-11-14
covid19korea.github.comNot in the scope2026-11-14
covid19lan.github.comNot in the scope2026-11-14
covid19latinamerica.github.comNot in the scope2026-11-14
covid19mail.github.commailNot in the scope2026-11-14
covid19na.github.comNot in the scope2026-11-14
covid19net.github.comNot in the scope2026-11-14
covid19northamerica.github.comNot in the scope2026-11-14
covid19pantheon.github.comNot in the scope2026-11-14
covid19pass.github.comNot in the scope2026-11-14
covid19payment.github.comNot in the scope2026-11-14
covid19pc.github.comNot in the scope2026-11-14
covid19php.github.comNot in the scope2026-11-14
covid19preferences.github.comNot in the scope2026-11-14
covid19priv.github.comNot in the scope2026-11-14
covid19private.github.cominternalNot in the scope2026-11-14
covid19prod.github.comNot in the scope2026-11-14
covid19production.github.comNot in the scope2026-11-14
covid19profile.github.comNot in the scope2026-11-14
covid19profiles.github.comNot in the scope2026-11-14
covid19promo.github.comNot in the scope2026-11-14
covid19promotion.github.comNot in the scope2026-11-14
covid19proxy.github.comNot in the scope2026-11-14
covid19repo.github.comgitNot in the scope2026-11-14
covid19reset.github.comNot in the scope2026-11-14
covid19restricted.github.comNot in the scope2026-11-14
covid19reviews.github.comNot in the scope2026-11-14
covid19s.github.comNot in the scope2026-11-14
covid19secure.github.comNot in the scope2026-11-14
covid19security.github.comNot in the scope2026-11-14
covid19singed.github.comNot in the scope2026-11-14
covid19skins.github.comNot in the scope2026-11-14
covid19spring.github.comNot in the scope2026-11-14
covid19stage.github.comstagingNot in the scope2026-11-14
covid19stage1.github.comstagingNot in the scope2026-11-14
covid19staging.github.comstagingNot in the scope2026-11-14
covid19static.github.comNot in the scope2026-11-14
covid19swagger.github.comapiNot in the scope2026-11-14
covid19test1.github.comtestNot in the scope2026-11-14
covid19testing1.github.comtestNot in the scope2026-11-14
covid19trial.github.comNot in the scope2026-11-14
covid19tur.github.comNot in the scope2026-11-14
covid19turk.github.comNot in the scope2026-11-14
covid19w3.github.comNot in the scope2026-11-14
covid19web.github.comNot in the scope2026-11-14
covid19web1.github.comNot in the scope2026-11-14
cow.github.comNot in the scope2026-11-14
cowboy.github.comNot in the scope2026-11-14
cowoxosantivirus.github.comNot in the scope2026-11-14
cowpaths.github.comNot in the scope2026-11-14
cowthan.github.comNot in the scope2026-11-14
cox.github.comNot in the scope2026-11-14
coxchen.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.